Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/3139342e3132372e3136352e302f32342d3234203d3e20323132353132.roa
File: 3139342e3132372e3136352e302f32342d3234203d3e20323132353132.roa (raw, json)
Hash identifier: pondLsaW0A4/xxm08LrRTFjqYke8hgGyZm2AT+9cLd0=
Subject key identifier: A6:11:B4:D5:2F:D4:54:B3:36:B8:3E:63:70:5A:CD:0D:4D:D5:6E:C5
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 18450C2517E6E4CB7658CFF7496F0153D5CA6B7A
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136352e302f32342d3234203d3e20323132353132.roa
Signing time: Fri 13 Feb 2026 11:48:58 +0000
ROA not before: Fri 13 Feb 2026 11:43:58 +0000
ROA not after: Fri 12 Feb 2027 11:48:58 +0000
asID: 212512
IP address blocks: 194.127.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:06:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:45:0c:25:17:e6:e4:cb:76:58:cf:f7:49:6f:01:53:d5:ca:6b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Feb 13 11:43:58 2026 GMT
Not After : Feb 12 11:48:58 2027 GMT
Subject: CN=A611B4D52FD454B336B83E63705ACD0D4DD56EC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:89:ca:e3:60:13:46:ae:87:b0:b4:ac:f3:
7a:13:e7:dd:db:00:f2:04:84:94:60:90:5a:33:d5:
d5:7f:8f:0b:03:58:0f:44:f8:f8:39:cc:3c:39:ce:
18:b9:7e:16:8a:aa:d4:50:0f:82:12:36:c5:5d:d4:
1f:4d:1b:39:d8:dc:00:3f:7d:e9:ac:49:c2:0f:52:
04:f9:dd:23:47:ee:80:db:15:9d:02:a4:7f:36:01:
c7:bf:43:7e:b1:9c:8d:8f:8f:42:d1:43:4d:3d:3d:
83:bc:85:7b:c3:11:85:db:4c:2b:40:d7:3f:94:7a:
62:a7:60:32:40:56:16:76:f6:de:8a:f4:13:28:70:
4a:bb:19:fc:85:67:9e:eb:59:b0:50:2f:f6:44:5c:
e8:7f:5b:30:b5:44:ce:ee:b9:ff:47:e0:6a:b9:20:
7e:cf:6a:45:a0:bc:96:58:a8:b4:bd:eb:81:cc:4f:
1e:50:a2:f3:e1:84:7f:10:8b:38:12:21:16:43:d8:
72:f3:0e:ed:41:b2:6d:4b:b8:26:6f:55:1b:d9:e3:
3f:b9:72:aa:ee:87:a8:a0:e5:ec:36:31:b5:80:9e:
ce:2b:19:45:8c:c3:36:29:57:36:fb:49:00:3c:75:
87:6b:24:8a:c0:b3:f3:a6:63:1a:1c:36:17:18:d3:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:11:B4:D5:2F:D4:54:B3:36:B8:3E:63:70:5A:CD:0D:4D:D5:6E:C5
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136352e302f32342d3234203d3e20323132353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.165.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:44:72:37:a3:de:38:0f:d5:12:ee:04:43:67:49:69:23:aa:
5a:f0:f7:ea:a8:a9:c1:de:c0:a2:87:b6:97:ab:f1:5c:9d:1c:
06:e8:10:97:5d:ed:c9:2f:84:9e:9e:36:c4:1d:45:44:4b:db:
67:6e:58:9b:6c:9f:2c:a5:9e:a4:e3:27:3d:5e:f6:0c:ef:68:
52:45:f0:11:61:0e:37:14:c0:04:76:86:f0:07:2f:f3:b9:98:
37:de:f4:8d:28:a6:37:60:11:03:0a:80:d5:3c:76:87:9a:19:
24:01:27:90:9f:84:31:fd:b4:f8:1b:2e:9a:5a:06:79:b4:aa:
9f:4d:2f:9e:1a:33:8d:65:ec:0e:69:b3:41:47:34:f4:73:85:
c3:ef:da:08:d2:ab:0e:35:41:b1:ba:3a:73:51:4a:f8:75:63:
eb:17:6f:d4:86:f7:d0:81:14:87:a7:c3:13:a0:66:1e:4b:4e:
e4:43:3d:0a:fb:b4:f2:77:d0:4a:5b:d8:66:fd:23:a6:e5:16:
f1:87:da:b4:27:d6:df:e3:4f:24:b1:0e:22:85:0a:6a:f5:32:
e4:e8:ae:d3:8a:57:23:b8:cd:f5:bf:eb:ec:fe:50:18:2d:d6:
c2:d3:d6:6d:30:4f:76:be:3c:47:8f:4a:22:6f:b7:d6:3e:4b:
ac:bc:8a:2f
-----BEGIN CERTIFICATE-----
MIIExjCCA66gAwIBAgIUGEUMJRfm5Mt2WM/3SW8BU9XKa3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU1ZTJlNzJkN2ZmZGU2YmNlYjczY2UyNmYxODVjNjc4
YTIzODkyZDAeFw0yNjAyMTMxMTQzNThaFw0yNzAyMTIxMTQ4NThaMDMxMTAvBgNV
BAMTKEE2MTFCNEQ1MkZENDU0QjMzNkI4M0U2MzcwNUFDRDBENERENTZFQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YInK42ATRq6HsLSs83oT593b
APIEhJRgkFoz1dV/jwsDWA9E+Pg5zDw5zhi5fhaKqtRQD4ISNsVd1B9NGznY3AA/
femsScIPUgT53SNH7oDbFZ0CpH82Ace/Q36xnI2Pj0LRQ009PYO8hXvDEYXbTCtA
1z+UemKnYDJAVhZ29t6K9BMocEq7GfyFZ57rWbBQL/ZEXOh/WzC1RM7uuf9H4Gq5
IH7PakWgvJZYqLS964HMTx5QovPhhH8QizgSIRZD2HLzDu1Bsm1LuCZvVRvZ4z+5
cqruh6ig5ew2MbWAns4rGUWMwzYpVzb7SQA8dYdrJIrAs/OmYxocNhcY0ze1AgMB
AAGjggHQMIIBzDAdBgNVHQ4EFgQUphG01S/UVLM2uD5jcFrNDU3VbsUwHwYDVR0j
BBgwFoAUtV4uctf/3mvOtzzibxhcZ4ojiS0wDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5vd2wubmV0L3JyZHAvb3dsLzEvQjU1
RTJFNzJEN0ZGREU2QkNFQjczQ0UyNkYxODVDNjc4QTIzODkyRC5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL3RWNHVjdGZfM212T3R6emlieGhjWjRvamlTMC5jZXIw
egYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jwa2kub3dsLm5l
dC9ycmRwL293bC8xLzMxMzkzNDJlMzEzMjM3MmUzMTM2MzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzIzNTMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCf6UwDQYJKoZIhvcN
AQELBQADggEBALFEcjej3jgP1RLuBENnSWkjqlrw9+qoqcHewKKHtper8VydHAbo
EJdd7ckvhJ6eNsQdRURL22duWJtsnyylnqTjJz1e9gzvaFJF8BFhDjcUwAR2hvAH
L/O5mDfe9I0opjdgEQMKgNU8doeaGSQBJ5CfhDH9tPgbLppaBnm0qp9NL54aM41l
7A5ps0FHNPRzhcPv2gjSqw41QbG6OnNRSvh1Y+sXb9SG99CBFIenwxOgZh5LTuRD
PQr7tPJ30Epb2Gb9I6blFvGH2rQn1t/jTySxDiKFCmr1MuTortOKVyO4zfW/6+z+
UBgt1sLT1m0wT3a+PEePSiJvt9Y+S6y8ii8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:28 2026 by rpki-client